Multiple TP-Link Omada Vulnerabilities found

Several vulnerabilities have been found in the TP-Link Omada system, which is a popular software-defined networking solution for small to medium-sized businesses. The vulnerabilities could let attackers run code from a distance, causing serious security issues.

The affected devices are wireless access points, routers, switches, VPN devices, and hardware controllers for the Omada software.

• Alert

Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws

By infosecbulletin / Thursday , October 1 2026

Hackers to exploit a flaw in Zimbra mail servers that are connected to the Internet. They send special emails that...

Read More

• Alert

Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws

By infosecbulletin / Wednesday , September 30 2026

Google has said that hackers are using two serious Citrix NetScaler security holes to get root access, set up hidden...

Read More

• Alert

CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks

By infosecbulletin / Wednesday , September 30 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is alerting people about a major flaw in MikroTik RouterOS. This could...

Read More

• Alert
• Cyber Attack

Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People

By infosecbulletin / Tuesday , September 29 2026

Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been...

Read More

• Cyber Attack

JadePuffer Agentic AI targets and destroys Azure’s cloud resources

By infosecbulletin / Tuesday , September 29 2026

The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The...

Read More

• Event
• Feature

“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”

By infosecbulletin / Tuesday , September 29 2026

The 5th Edition of InfoSecCon-2026, a premier cybersecurity-focused event, has been successfully completed with the participation of cybersecurity professionals, technology...

Read More

• Alert

Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation

By infosecbulletin / Saturday , September 19 2026

Microsoft has fixed a serious security flaw in Azure AI Foundry that could let bad actors gain privilege escalation. The...

Read More

• Hot Topic

AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage

By infosecbulletin / Friday , September 18 2026

Amazon Web Services cannot restore access to its cloud-computing facility in Bahrain and ‌one of three data-hosting zones in the...

Read More

• Alert

Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw

By infosecbulletin / Friday , September 18 2026

A threat actor is allegedly offering a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, claiming that...

Read More

• Hot Topic

Anthropic prepares “Claude Money” to analyze bank account and financial data

By infosecbulletin / Thursday , September 17 2026

Anthropic is making a new Claude feature called “Money.” It's a separate tab in the mobile app. The new interface...

Read More

Vulnerability Details:

Identified Vulnerabilities

Twelve unique vulnerabilities were identified and reported to the vendor following our responsible disclosure policy.

Talos ID CVE(s)
TALOS-2023-1888 CVE-2023-49906–CVE-2023-49913
TALOS-2023-1864 CVE-2023-48724
TALOS-2023-1862 CVE-2023-49133–CVE-2023-49134
TALOS-2023-1861 CVE-2023-49074
TALOS-2023-1859 CVE-2023-47618
TALOS-2023-1858 CVE-2023-47617
TALOS-2023-1857 CVE-2023-46683
TALOS-2023-1856 CVE-2023-42664
TALOS-2023-1855 CVE-2023-47167
TALOS-2023-1854 CVE-2023-47209
TALOS-2023-1853 CVE-2023-36498
TALOS-2023-1850 CVE-2023-43482

Cisco Talos found twelve vulnerabilities in the TP-Link Omada system. The vendor was informed about these vulnerabilities following a responsible disclosure policy. The affected devices are:

EAP 115 and EAP 225 wireless access points
ER7206 gigabit VPN router
Omada software controller

To read out the full report click here.